Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/6c905dd5-58d1-37c7-b40e-0d9630648b41.roa
File:                     6c905dd5-58d1-37c7-b40e-0d9630648b41.roa (raw, json)
Hash identifier:          ii4OEfmyRqb6ARWYM4i/90KQBVrbF4lF6512ibp+r6Q=
Subject key identifier:   EA:E8:62:8F:1D:28:F6:85:9A:A7:8E:B9:EE:0E:41:86:28:B6:10:1E
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F43285849C904E8DAE07A6974E47DC200
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/6c905dd5-58d1-37c7-b40e-0d9630648b41.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     33392
IP address blocks:        74.112.232.0/21 maxlen: 21
                          74.116.95.0/24 maxlen: 24
                          199.19.28.0/22 maxlen: 22
                          208.78.48.0/21 maxlen: 21
                          208.91.192.0/22 maxlen: 22
                          2604:25c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e8:da:e0:7a:69:74:e4:7d:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=e129df75-4c20-4ab6-9aeb-535ae922ca39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:26:bb:72:c3:75:0f:8f:03:d8:ef:a9:84:
                    3d:d5:14:f8:99:39:2d:f9:35:32:56:7e:6a:a9:b9:
                    7d:bf:4f:40:6c:bb:ca:de:7c:51:e6:a6:c0:43:cb:
                    ec:7a:c7:75:f8:1b:a9:e2:b2:33:70:2f:d8:33:b9:
                    a8:a3:7b:91:1a:21:58:3f:d9:48:57:e2:fb:41:ff:
                    1e:b3:af:7f:0e:15:58:bb:21:5f:96:b9:d9:1b:38:
                    44:cc:ad:31:18:82:6e:8b:1b:eb:01:d5:c6:ce:b1:
                    63:5d:0d:1d:dd:58:50:48:71:ea:db:6a:77:37:e0:
                    36:22:6f:e7:24:32:f5:56:6b:f0:a9:c2:3d:c0:8b:
                    c3:bd:dd:2d:d1:ce:82:f5:35:ef:e9:f3:87:39:43:
                    d6:17:4b:d9:55:a7:65:74:f9:23:eb:8f:2b:ac:e1:
                    5e:06:b2:9a:25:18:cd:de:90:ad:b6:b1:03:a8:a6:
                    28:62:d4:c2:f2:a6:07:53:ba:09:37:fe:97:c4:cc:
                    48:ac:b2:77:a9:be:e0:88:34:6d:06:40:b3:55:0d:
                    9e:95:be:b7:cc:30:44:92:f6:b7:d6:3e:4e:98:e5:
                    0c:c7:eb:81:dd:b9:82:f7:d6:0f:ec:72:a7:8c:b2:
                    19:00:88:6b:c4:cf:1e:bf:9c:20:ae:00:2a:a5:58:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E8:62:8F:1D:28:F6:85:9A:A7:8E:B9:EE:0E:41:86:28:B6:10:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/6c905dd5-58d1-37c7-b40e-0d9630648b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.232.0/21
                  74.116.95.0/24
                  199.19.28.0/22
                  208.78.48.0/21
                  208.91.192.0/22
                IPv6:
                  2604:25c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:bf:e6:ae:df:e3:a8:e3:f8:24:d1:14:b5:49:e2:99:7c:
         78:3d:86:3b:43:09:dd:42:ea:d7:44:3a:3d:64:db:b6:35:31:
         13:0b:df:49:9e:bf:d7:92:f8:35:7d:33:e9:d8:6b:54:25:05:
         d6:dc:58:f1:94:fd:8b:59:53:53:4e:fc:d9:a5:12:08:b1:f3:
         3f:0c:13:69:3f:07:9c:f6:72:40:0a:5a:67:b0:1f:10:03:04:
         87:1c:03:1f:67:46:8b:3f:2e:49:2b:c0:12:ba:f9:34:04:2f:
         6d:1d:d9:74:37:91:1a:a7:a5:8e:73:3f:33:39:43:bc:90:6f:
         01:02:40:02:de:de:e7:d4:9a:74:bf:1b:ac:2d:71:e3:ee:2e:
         aa:e2:5c:21:5b:2d:6e:dc:ff:28:0e:a4:b4:d3:01:71:e4:ec:
         88:eb:55:32:68:62:aa:3b:55:c0:ca:66:ee:bd:ac:41:b0:de:
         8a:b8:71:50:4f:03:f9:cf:1e:ec:3a:e4:e8:13:27:40:9b:54:
         9f:4a:2e:73:c2:1a:cb:06:f2:ee:34:cc:6a:cb:c9:5c:38:3b:
         5a:48:e8:bf:c1:44:0b:c8:ba:64:f9:cb:09:7b:be:57:e4:92:
         4c:83:7f:36:4d:67:97:e6:e3:50:34:e1:f6:03:32:1a:48:94:
         40:8c:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:18:35 2025 by rpki-client